Threat Control and Containment 29 3. TrustSec can also provide data confidentiality by using MACSec. For example, if a policy requires that data should be secured, Cisco TrustSec understands this policy and dynamically encrypts the user data. Cisco AnyConnect Cisco AnyConnect protects mobile employees on PC-based or smartphone platforms using an SSL or IP Security (IPsec) virtual private network (VPN) to deliver a more seamless, always-on, and always-protected experience to end users, while enabling IT administrators to enforce policies and block malware with cloud-based or hybrid web security. Cisco AnyConnect provides the following: Device support regardless of device type (for example, PC, laptop, smart phone, tablet, or PDA) Multifunctional security by combining multiple security controls in one client application Consistent experience by providing an always-on intelligent connection for seam- less experience and performance